JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.36.235.132

13.36.235.132

Neutral Activity

60 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon Data Services France

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-13-36-235-132.eu-west-3.compute.amazonaws.com

Domain Name

amazon.com

Country

🇫🇷 France

City

Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.36.235.132 has been reported 60 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 13.36.235.132:

This IP address has been reported a total of 60 times from 35 distinct sources. 13.36.235.132 was first reported on February 24th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Starburst SysOp Team	2025-02-25 18:13:36 (1 year ago)	(mod_security-custom) mod_security (id:210492) triggered by 13.36.235.132 (FR/France/ec2-13-36-235-1 ... show more (mod_security-custom) mod_security (id:210492) triggered by 13.36.235.132 (FR/France/ec2-13-36-235-132.eu-west-3.compute.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Tue Feb 25 18:13:34.975701 2025] [:error] [pid 204912:tid 204921] [client 13.36.235.132:58679] [client 13.36.235.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stl2-17.starburstserver.net"] [uri "/sftp-config.json"] [unique_id "Z74ITo65ty89ILGH1R1e9QAAAMc"] show less	Hacking
🇺🇸 Starburst SysOp Team	2025-02-25 18:13:00 (1 year ago)	[Tue Feb 25 18:13:34.125995 2025] [:error] [pid 3704010:tid 3704077] [client 13.36.235.132:58672] [c ... show more [Tue Feb 25 18:13:34.125995 2025] [:error] [pid 3704010:tid 3704077] [client 13.36.235.132:58672] [client 13.36.235.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stl2-14.starburstserver.net"] [uri "/sftp-config.json"] [unique_id "Z74ITiD6oGWr3As1I3Bz-AAAAEo"] show less	Hacking Brute-Force Web App Attack
🇺🇸 Starburst SysOp Team	2025-02-25 18:13:00 (1 year ago)	[Tue Feb 25 18:13:34.541442 2025] [:error] [pid 3658903:tid 3658906] [client 13.36.235.132:58677] [c ... show more [Tue Feb 25 18:13:34.541442 2025] [:error] [pid 3658903:tid 3658906] [client 13.36.235.132:58677] [client 13.36.235.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stl2-15.starburstserver.net"] [uri "/sftp-config.json"] [unique_id "Z74ITjjb9I3_WKwinAxXgwAAAME"] show less	Hacking Brute-Force Web App Attack
🇺🇸 MPL	2025-02-25 06:58:05 (1 year ago)	tcp/80 (12 or more attempts)	Port Scan
🇺🇸 MPL	2025-02-25 06:58:05 (1 year ago)	tcp/80 (6 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2025-02-25 06:23:09 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 13.36.235.132 (ec2-13-36-235-132.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 13.36.235.132 (ec2-13-36-235-132.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 01:23:02.196583 2025] [security2:error] [pid 17560:tid 17560] [client 13.36.235.132:56660] [client 13.36.235.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stringbikini.teenyb.com"] [uri "/sftp-config.json"] [unique_id "Z71hxi5CMK-wg4rYti1I_wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2025-02-25 06:12:42 (1 year ago)	18 attacks on password grabbing URLs: GET /.vscode/sftp.json HTTP/1.1	Hacking
🇺🇸 octageeks.com	2025-02-25 05:08:34 (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2025-02-25 01:27:50 (1 year ago)	Probing to gain illegal access	Web App Attack
🇺🇸 TPI-Abuse	2025-02-24 23:32:59 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 13.36.235.132 (ec2-13-36-235-132.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 13.36.235.132 (ec2-13-36-235-132.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 24 18:32:55.068554 2025] [security2:error] [pid 9530:tid 9530] [client 13.36.235.132:64146] [client 13.36.235.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoneageartifacts.com"] [uri "/sftp-config.json"] [unique_id "Z70Bp0fm8dnGhEw2Z5DNoAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-02-24 22:59:17 (1 year ago)	Attempting to access restricted files	Hacking Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2025-02-24 22:50:40 (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇩🇪 Linux-Tech	2025-02-24 20:05:11 (1 year ago)	13.36.235.132 - - [24/Feb/2025:21:05:09 +0100] "GET /sftp-config.json HTTP/1.1" 404 146 "-" "Mozilla ... show more 13.36.235.132 - - [24/Feb/2025:21:05:09 +0100] "GET /sftp-config.json HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.36.235.132 - - [24/Feb/2025:21:05:10 +0100] "GET /.vscode/sftp.json HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 tannerschermerhorn.dev	2025-02-24 20:05:10 (1 year ago)	Malicious activity detected from 16509 AMAZON-02 towards host tannerschermerhorn.dev (GET HTTP/1.1) ... show more Malicious activity detected from 16509 AMAZON-02 towards host tannerschermerhorn.dev (GET HTTP/1.1) @ 2025-02-24T20:05:10Z show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇧🇪 cmbplf	2025-02-24 19:30:06 (1 year ago)	4.131 requests to */sftp-config.json	Brute-Force Bad Web Bot

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.196.86.5

🇺🇸 72.49.7.170

🇺🇸 70.175.182.48

🇮🇶 65.20.132.230

🇺🇸 54.165.218.206

🇳🇱 45.8.17.123

🇹🇼 34.80.184.198

🇰🇿 185.233.3.95

🇭🇰 172.253.6.28

🇺🇸 104.129.1.194

🇮🇩 103.191.14.210

🇮🇩 45.198.10.227

🇹🇿 41.59.200.166

🇸🇬 35.240.128.138

🇻🇳 27.71.60.22

🇪🇹 196.189.155.89

🇺🇸 172.174.130.156

🇩🇪 167.235.139.196

🇺🇸 107.150.104.16

🇷🇺 37.140.169.163